curl/tests/certs
moparisthebest 93e450793c SSL: implement public key pinning
Option --pinnedpubkey takes a path to a public key in DER format and
only connect if it matches (currently only implemented with OpenSSL).

Provides CURLOPT_PINNEDPUBLICKEY for curl_easy_setopt().

Extract a public RSA key from a website like so:
openssl s_client -connect google.com:443 2>&1 < /dev/null | \
sed -n '/-----BEGIN/,/-----END/p' | openssl x509 -noout -pubkey \
| openssl rsa -pubin -outform DER > google.com.der
2014-10-07 14:44:19 +02:00
..
scripts SSL: implement public key pinning 2014-10-07 14:44:19 +02:00
EdelCurlRoot-ca.cacert tests/certs: re-generated because of lost pass-phrase 2010-05-27 23:39:54 +02:00
EdelCurlRoot-ca.cnf tests/certs/scripts: generate also CRL 2010-05-27 23:33:19 +02:00
EdelCurlRoot-ca.crt tests/certs: re-generated because of lost pass-phrase 2010-05-27 23:39:54 +02:00
EdelCurlRoot-ca.csr tests/certs: re-generated because of lost pass-phrase 2010-05-27 23:39:54 +02:00
EdelCurlRoot-ca.der tests/certs: re-generated because of lost pass-phrase 2010-05-27 23:39:54 +02:00
EdelCurlRoot-ca.key tests/certs: re-generated because of lost pass-phrase 2010-05-27 23:39:54 +02:00
EdelCurlRoot-ca.prm - Peter Sylvester made the HTTPS test server use specific certificates for 2009-08-11 21:48:58 +00:00
Makefile.am commit bc682cbd follow-up 2013-01-15 19:54:47 +01:00
Server-localhost0h-sv.crl tests/certs: re-generated because of lost pass-phrase 2010-05-27 23:39:54 +02:00
Server-localhost0h-sv.crt tests/certs: re-generated because of lost pass-phrase 2010-05-27 23:39:54 +02:00
Server-localhost0h-sv.csr tests/certs: re-generated because of lost pass-phrase 2010-05-27 23:39:54 +02:00
Server-localhost0h-sv.der tests/certs: re-generated because of lost pass-phrase 2010-05-27 23:39:54 +02:00
Server-localhost0h-sv.dhp - Added Diffie-Hellman parameters to several test harness certificate files in 2009-11-28 10:01:21 +00:00
Server-localhost0h-sv.key tests/certs: re-generated because of lost pass-phrase 2010-05-27 23:39:54 +02:00
Server-localhost0h-sv.p12 - Peter Sylvester made the HTTPS test server use specific certificates for 2009-08-11 21:48:58 +00:00
Server-localhost0h-sv.pem tests/certs: re-generated because of lost pass-phrase 2010-05-27 23:39:54 +02:00
Server-localhost0h-sv.prm - Peter Sylvester made the HTTPS test server use specific certificates for 2009-08-11 21:48:58 +00:00
Server-localhost0h-sv.pub.der SSL: implement public key pinning 2014-10-07 14:44:19 +02:00
Server-localhost-sv.crl tests/certs: re-generated because of lost pass-phrase 2010-05-27 23:39:54 +02:00
Server-localhost-sv.crt tests/certs: re-generated because of lost pass-phrase 2010-05-27 23:39:54 +02:00
Server-localhost-sv.csr tests/certs: re-generated because of lost pass-phrase 2010-05-27 23:39:54 +02:00
Server-localhost-sv.der tests/certs: re-generated because of lost pass-phrase 2010-05-27 23:39:54 +02:00
Server-localhost-sv.dhp - Added Diffie-Hellman parameters to several test harness certificate files in 2009-11-28 10:01:21 +00:00
Server-localhost-sv.key tests/certs: re-generated because of lost pass-phrase 2010-05-27 23:39:54 +02:00
Server-localhost-sv.p12 - Peter Sylvester made the HTTPS test server use specific certificates for 2009-08-11 21:48:58 +00:00
Server-localhost-sv.pem tests/certs: re-generated because of lost pass-phrase 2010-05-27 23:39:54 +02:00
Server-localhost-sv.prm - Peter Sylvester made the HTTPS test server use specific certificates for 2009-08-11 21:48:58 +00:00
Server-localhost-sv.pub.der SSL: implement public key pinning 2014-10-07 14:44:19 +02:00
Server-localhost.nn-sv.crl tests/certs: re-generated because of lost pass-phrase 2010-05-27 23:39:54 +02:00
Server-localhost.nn-sv.crt tests/certs: re-generated because of lost pass-phrase 2010-05-27 23:39:54 +02:00
Server-localhost.nn-sv.csr tests/certs: re-generated because of lost pass-phrase 2010-05-27 23:39:54 +02:00
Server-localhost.nn-sv.der tests/certs: re-generated because of lost pass-phrase 2010-05-27 23:39:54 +02:00
Server-localhost.nn-sv.dhp - Added Diffie-Hellman parameters to several test harness certificate files in 2009-11-28 10:01:21 +00:00
Server-localhost.nn-sv.key tests/certs: re-generated because of lost pass-phrase 2010-05-27 23:39:54 +02:00
Server-localhost.nn-sv.pem tests/certs: re-generated because of lost pass-phrase 2010-05-27 23:39:54 +02:00
Server-localhost.nn-sv.prm - Peter Sylvester made the HTTPS test server use specific certificates for 2009-08-11 21:48:58 +00:00
Server-localhost.nn-sv.pub.der SSL: implement public key pinning 2014-10-07 14:44:19 +02:00
srp-verifier-conf TLS-SRP: support added when using GnuTLS 2011-01-19 20:35:02 +01:00
srp-verifier-db TLS-SRP: support added when using GnuTLS 2011-01-19 20:35:02 +01:00